Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
File:                     zZ2srF97QCrwm1L-aJFlS5NJmsU.mft (raw, json)
Hash identifier:          Z5C48Td2GlnP34sNpmrnATGJ+hhWkJrAXioMONeLenM=
Subject key identifier:   3F:87:C3:ED:3B:83:65:73:57:2A:95:CE:38:07:C7:BA:7E:07:B6:42
Authority key identifier: CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
Certificate issuer:       /CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Certificate serial:       0195C8ACB3A7559B66385ECC81E1744B3365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
Manifest number:          07CA
Signing time:             Mon 24 Mar 2025 15:01:56 +0000
Manifest this update:     Mon 24 Mar 2025 15:01:56 +0000
Manifest next update:     Tue 25 Mar 2025 15:01:56 +0000
Files and hashes:         1: zZ2srF97QCrwm1L-aJFlS5NJmsU.crl (hash: xWAr3SKHyPYhCOVN7Z0IBAHPQ1pUKpNnj4v5iSIxXDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:ac:b3:a7:55:9b:66:38:5e:cc:81:e1:74:4b:33:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
        Validity
            Not Before: Mar 24 15:01:56 2025 GMT
            Not After : Mar 25 15:01:56 2025 GMT
        Subject: CN=3f87c3ed3b836573572a95ce3807c7ba7e07b642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:7a:b5:68:20:e6:d1:f6:f5:78:bb:ce:a3:
                    d1:ed:42:db:35:85:bf:b5:6f:b8:f8:18:7a:12:93:
                    e7:bb:ff:23:cd:a7:05:2b:9d:62:22:39:df:7d:3c:
                    59:60:ec:66:66:60:11:ce:e9:ad:97:ee:03:b9:3c:
                    82:66:90:30:73:8f:60:13:a4:5d:ac:3d:f9:ac:11:
                    c0:36:20:6c:a7:17:8a:a0:ab:d6:42:3a:91:32:2c:
                    1f:12:33:cd:4d:a1:c1:c2:1e:a4:f6:65:43:31:18:
                    2c:53:9f:ba:16:3e:82:ef:da:c7:24:6d:c4:21:b0:
                    dd:44:c4:04:45:ea:97:f3:3f:23:72:63:36:96:ee:
                    fc:e9:c3:c1:43:67:b0:33:7a:98:2d:b5:a6:08:79:
                    80:d0:7c:ff:8d:dd:1e:01:30:36:59:70:f3:3e:00:
                    e2:49:29:40:92:de:3d:e1:5f:44:d8:70:6e:54:73:
                    d1:52:34:ba:83:57:21:69:c1:01:c7:1d:eb:e6:49:
                    8b:7d:2e:ff:a9:e8:cd:67:8d:de:ae:1d:e3:6c:0c:
                    24:b2:74:44:ec:1a:13:6b:2b:19:c7:a3:a2:80:d0:
                    8d:9c:68:00:2a:b7:d1:a4:fb:0f:e1:75:e6:72:a1:
                    26:78:05:50:00:f5:50:2f:72:9f:26:c2:15:97:91:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:C3:ED:3B:83:65:73:57:2A:95:CE:38:07:C7:BA:7E:07:B6:42
            X509v3 Authority Key Identifier:
                keyid:CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:47:99:66:2d:87:ab:05:81:40:29:8a:17:e2:8a:46:d4:
         24:85:db:7f:b6:b3:f2:c7:5a:d9:0d:d0:9a:ef:7d:d0:e7:45:
         6a:f8:0e:bb:18:a0:a4:b6:6d:5a:a6:3a:4a:a9:68:26:da:7a:
         0a:45:1a:f0:ee:3e:34:63:1b:76:b8:20:c7:be:7a:d6:0b:c3:
         eb:12:00:2b:ec:5f:41:49:b5:b9:7c:ba:35:60:3a:67:d4:5a:
         39:f9:c3:cb:30:15:b0:d1:2a:83:87:ca:3d:0e:47:73:3f:ed:
         38:60:04:7b:59:ad:ce:ec:e8:f2:d7:8f:80:69:3c:37:d6:cf:
         65:60:33:c2:89:57:7c:bd:d2:3f:28:f1:eb:2b:20:5a:d4:71:
         5f:13:d0:fc:ff:50:0f:dc:13:19:1b:b7:38:3e:96:22:3d:23:
         c1:67:0a:61:08:8c:63:3f:e1:29:41:60:ac:a0:3d:be:55:9c:
         7f:2a:6d:36:5e:22:c8:92:b2:e3:c2:7d:cb:57:82:33:ce:22:
         b7:e1:eb:f9:1d:f4:62:0e:49:21:9e:31:ff:e2:0b:af:2d:f3:
         f6:03:4c:08:fb:85:d1:e5:14:75:d5:13:7a:82:a9:7b:23:76:
         d3:7a:81:8e:f2:8b:e9:db:f9:c3:f2:32:03:55:45:ad:6c:0b:
         ce:03:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----